labels.group_list_name=Naam
labels.group_name=Naam
labels.group_title_details=Groep
labels.related_content_configuration=Gerelateerde inhoud
labels.related_content_content=Inhoud
labels.related_content_list_term=Zoekterm
labels.related_content_term=Zoekterm
labels.related_content_title_details=Gerelateerde inhoud
labels.related_query_configuration=Gerelateerde query
labels.related_query_list_term=Zoekterm
labels.related_query_queries=Queries

- Added enforcement of an upper cost bound for DRA evaluations of CEL. The API server and scheduler now enforce an upper bound on the cost and runtime steps required for evaluating a CEL expression. ([#128101](https://github.com/kubernetes/kubernetes/pull/128101), [@pohly](https://github.com/pohly)) [SIG API Machinery and Node]

    /** A thread-local variable to hold the directory context. */
    protected ThreadLocal<DirContextHolder> contextLocal = new ThreadLocal<>();

    /** A flag to indicate if the LDAP connection is bound. */
    protected volatile boolean isBind = false;

    /** The Fess configuration. */
    protected FessConfig fessConfig;

    /**
     * Default constructor.
     */
    public LdapManager() {

  If any `PreBindPreFlight` returned `Success`, the scheduler put NominatedNodeName to the pod 
  so that other components (such as the cluster autoscaler) could notice the pod was going to be bound to the node. ([#133021](https://github.com/kubernetes/kubernetes/pull/133021), [@sanposhiho](https://github.com/sanposhiho)) [SIG Scheduling and Testing]

- Expanded the on-disk kubelet credential provider configuration to allow an optional `tokenAttribute` field to be configured. When it is set, the kubelet will provision a token with the given audience bound to the current pod and its service account. This KSA token along with required annotations on the KSA defined in configuration will be sent to the credential provider plugin via its standard input (along with the image information that is already sent...